Security

I'm leveraging the Create Device for sponsoring, or allowing a new device online so that i can get scanned and profiled and what not.  One problem i'm trying to figure out though is if there is an already registered MAC Address in the guest device repository, then when i submit another registration for that same mac address it says no because it already exists.  

Is there a way to over ride what is in the guest device database with what was just submitted?  So if it was already expired that when submitted it'll just update it. 

-------------------------------------------

What exactly is the use-case? Why not use an MDM instead?

-------------------------------------------

Leveraging the create device module to allow new devices on to the network.  Like the first time a phone or printer or even a pc connects, if clearpass doesnt know anything about it, it'll fail its auth.   so i use the create device to have those teams sponsor their new devices, kind of like a one time access so they can get online, scanned and profiled.   

-------------------------------------------

Original Message:
Sent: Mar 30, 2026 11:42 AM
From: ahollifield
Subject: Update Start/Expiration Time for Guest Devices

What exactly is the use-case? Why not use an MDM instead?

Are you creating the guest device using Context Server Actions via API?

You can check whether the device already exists. If it does, you must update it. If not, create it.

------------------------------
Regards,

Waldemar
ACCX # 1377, ACEP, ACX - Network Security
If you find my answer useful, consider giving kudos and/or mark as solution
------------------------------

Original Message:
Sent: Mar 30, 2026 03:22 PM
From: Nicholas Gaba
Subject: Update Start/Expiration Time for Guest Devices

Leveraging the create device module to allow new devices on to the network.  Like the first time a phone or printer or even a pc connects, if clearpass doesnt know anything about it, it'll fail its auth.   so i use the create device to have those teams sponsor their new devices, kind of like a one time access so they can get online, scanned and profiled.